Senior Corporate Enterprise Platform Engineer (Windows)
Posted Updated
Summary
Owns and improves Dropbox's Windows endpoint platform as a hands-on individual contributor. Day-to-day work covers Windows and Intune patching, application delivery, automation with PowerShell/Python/Go/C#, FleetDM/osquery, infrastructure-as-code, and GitOps, plus mentoring teammates and collaborating with security and infrastructure teams.
- As a Senior Client Platform Engineer on CorpFleet Engineering, you will own and improve Dropbox’s Windows endpoint platform
- You will bring deep Windows and Intune expertise, make patching and application delivery more reliable, and build automation that reduces recurring work for the team
- This is a hands-on role combining Windows technical ownership with the development of a more code-managed endpoint platform
- You will help evaluate and adopt FleetDM, osquery, infrastructure-as-code, and GitOps practices where they improve reliability, visibility, and maintainability
- You will strengthen the current environment while building and validating the path forward—not assume that replacing a tool is the answer
- You will work with CorpInfra, IAM, Security, and support teams to make practical technical decisions, lead multi-phase improvements, and clarify ownership
- You will also mentor teammates through pairing, code review, and shared operational practices
- This is an individual-contributor role, not a people-management position
- Own endpoint reliability and lifecycle management. Improve provisioning, application delivery, updates, security configuration, and troubleshooting across the endpoint environment
- Make patching predictable and safe. Strengthen update workflows through testing, controlled rollouts, and remediation
- Make fleet health trustworthy and actionable. Improve reporting on device health, patching, and configuration, with clear ownership for resolving issues
- Build maintainable automation. Turn recurring work into reliable, tested workflows that other engineers can operate
- Advance code-managed endpoint operations. Adopt tools and practices that improve configuration management, validation, and deployment
- Lead cross-functional platform improvements. Define practical roadmaps, resolve dependencies, and balance security, reliability, employee experience, and team capacity
- Strengthen the team’s capability. Mentor teammates, review code and designs, and document reusable practices that improve coverage across the endpoint team
Benefits
- On-site fitness and meditation classes
- Commuter subsidies
- Medical, dental, and vision coverage
- We offer a generous company contribution toward individual medical, dental, and vision insurance coverage, including contributions toward dependent premiums
- Start building a successful 401K retirement plan with our dollar for dollar contribution match, up to $1,500 per quarter to a maximum of $6,000 per calendar year
- Keep sharing and collaborating with friends and family even when you’re not at work with free Dropbox space for your whole crew
- Take the vacation you’ve always dreamed of with up to four consecutive weeks of paid time off
- Celebrate common holidays without your paycheck taking the hit with 11 company paid holidays
- Each Dropboxer has access to 32 hours of paid volunteer time off each year that they can use to support the causes close to their hearts
- We regularly offer panels and seminars featuring the best minds in tech, talent, diversity, and beyond that any Dropboxer can attend from the comfort of their home
- No two Dropboxers are the same, and their benefits shouldn’t be either. Our Perks allowance empowers employees to customize their benefits in line with what really matters to them
- Ability to independently define and deliver multi-phase work, prioritize under ambiguity, partner across teams, and mentor other engineers
- Recent ownership of Windows and third-party application patching, including staged deployment, user-impact validation, failed-device handling, exceptions, and recovery
- Strong Windows troubleshooting skills across operating-system behavior, services, logs, networking, certificates, identity, and security controls. Able to distinguish reported management status from actual endpoint health
- Deep hands-on Intune experience across device lifecycle, configuration and compliance policies, application management, update workflows, and relevant Entra ID dependencies
- Significant experience engineering and operating Windows endpoint environments, with personal ownership beyond ticket handling or routine console administration
- Clear written and verbal communication, including concise technical decisions, incident updates, runbooks, and effective asynchronous collaboration
- Demonstrated use of version control, code review, automated checks, and controlled deployment for operational changes. Able to explain safe retries, failure handling, secrets management, and configuration drift
- Strong practical PowerShell skills and familiarity with at least one additional programming language, such as Python, Go, or C#. Experience building and maintaining production automation or systems integrations
- Connection: Communicate, collaborate, and build trust
- Adaptability: Learn, adjust, and stay effective through change
- Awareness: Understand yourself and others
- Judgment: Evaluate information and make decisions in complex situations
- Experience supporting developer-heavy, distributed environments and contributing reusable automation across Windows, macOS, or Linux
- Experience with infrastructure-as-code or declarative configuration, continuous integration and delivery, and migration or coexistence between endpoint-management platforms
- Practical osquery and SQL experience for endpoint inventory, health, or security use cases, including query validation, performance considerations, and handling stale or missing results
- Production experience with FleetDM on Windows, including agent operations, policies, queries, targeting, API integrations, or configuration managed through GitOps
- Experience with Automox, Patch My PC, or comparable tools, and with endpoint privilege management, application control, encryption, or other security controls
